Adding Google Cloud Platform

Overview

Google Cloud Platform (GCP) is Google's cloud solution. TOS Aurora monitors the GCP for policy revision changes. To help you organize the information for your devices, you can use the device information worksheet. To see which TOS features are supported for your device, review the feature support table.

The GCP project allows Google users to manage and create their virtual machines (VMs), assign them to a specific virtual private cloud (VPC). The VPCs contain firewalls which define security rules and restricts access between VMs, and specify the supported objects and services.

Prerequisites

  • Since every GCP project has a different project ID, verify that you have the project ID of your GCP project. You need this ID to monitor the required projects.

  • Generate a service account key in a JSON format for your GCP project and save it on your system.

  • Before you start, make sure that the GCP service account that you use for TOS Aurora monitoring has permission to run these commands: (TOS Aurora requires minimum permissive privileges to monitor devices.)

    • Policy Visibility only:

      compute.firewalls.list
      compute.instances.list
      compute.networks.list
      compute.projects.get
      compute.subnetworks.list
      resourcemanager.projects.get
      serviceusage.services.list
      compute.firewalls.list compute.instances.list compute.networks.list compute.projects.get compute.subnetworks.list resourcemanager.projects.get serviceusage.services.list

Adding a GCP Device

  1. In TOS Aurora, go to Monitoring > Manage Devices.

  2. Select the appropriate device type:

  3. Configure the device settings:

    • Device Type: This value is preloaded as Google GCP Project.

    • Name for Display: Name of the GCP project.

    • Domain: Available only if you have configured your system for managing multi-domains and All Domains is currently selected. Select the domain to which to add the device. The Domain can only be entered when adding a device; to change the Domain, you must migrate the device.

  4. Click Next.

  5. Specify the Project ID of your GCP project.

  6. Click Browse and import JSON file to upload the file that contains the GCP service account key (see Prerequisites).

  7. Click Next.

  8. In Monitoring Settings, do one of the following:

    • Select Default to use real-time monitoring and timing settings from the Timing page.

    Otherwise, select Custom and configure the monitoring mode and settings.

    • In Periodic Polling, select Custom settings and configure the Polling frequency - the frequency at which TOS Aurora fetches the configuration from each device.

      If you select 1 day, you can then select the exact time (hour and minute) for the daily polling.

  9. Click Next. 

  10. Save the configuration.

    The GCP project now appears in the Monitored Devices tree.

  11. To import VPCs that are created under the project, click Import Virtual Private Clouds and select the required devices.

    In multi-domain environments, you can select the domain for the VPC that you want to monitor.

  12. Click Import.

How Do I Get Here?

In TOS Aurora, go to Monitoring > Manage Devices.